Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,963
Erlang
39
GitHub Actions
38
Go
2,615
Maven
5,000+
npm
4,255
NuGet
760
pip
4,036
Pub
12
RubyGems
953
Rust
1,049
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,574 advisories

Loading
Zenoss Core 3.x contains a command injection vulnerability in the showDaemonXMLConfig endpoint.... High Unreviewed
CVE-2012-10048 was published Aug 8, 2025
: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2025-29865 was published Aug 7, 2025
Path traversal vulnerability in the virtualization base module. Successful exploitation of this... High Unreviewed
CVE-2025-54652 was published Aug 6, 2025
Path traversal vulnerability in the virtualization file module. Successful exploitation of this... High Unreviewed
CVE-2025-54653 was published Aug 6, 2025
ClanSphere 2011.3 is vulnerable to a local file inclusion (LFI) flaw due to improper handling of... High Unreviewed
CVE-2012-10034 was published Aug 5, 2025
XBMC version 11, including builds up to the 2012-11-04 nightly release, contains a path traversal... High Unreviewed
CVE-2012-10024 was published Aug 5, 2025
A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that... High Unreviewed
CVE-2013-10046 was published Aug 1, 2025
Alpine iLX-507 Command Injection Remote Code Execution. This vulnerability allows network... High Unreviewed
CVE-2025-8480 was published Aug 1, 2025
A path traversal vulnerability exists in A10 Networks AX Loadbalancer versions 2.6.1-GR1-P5, 2.7... High Unreviewed
CVE-2014-125125 was published Jul 31, 2025
A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A... High Unreviewed
CVE-2025-46359 was published Jul 31, 2025
A path handling issue was addressed with improved validation. This issue is fixed in macOS... High Unreviewed
CVE-2025-43196 was published Jul 30, 2025
MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within... High Unreviewed
CVE-2025-44137 was published Jul 29, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS... High Unreviewed
CVE-2025-53080 was published Jul 29, 2025
The Kallyas theme for WordPress is vulnerable to arbitrary folder deletion due to insufficient... High Unreviewed
CVE-2025-6989 was published Jul 26, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2025-52452 was published Jul 25, 2025
The hiWeb Export Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all... High Unreviewed
CVE-2025-7640 was published Jul 25, 2025
An unauthenticated path traversal vulnerability exists in Dicoogle PACS Web Server version 2.5.0... High Unreviewed
CVE-2018-25113 was published Jul 23, 2025
A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server... High Unreviewed
CVE-2010-10012 was published Jul 23, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2025-54453 was published Jul 23, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2025-54450 was published Jul 23, 2025
Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0... High Unreviewed
CVE-2025-51480 was published Jul 22, 2025
Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary... High Unreviewed
CVE-2025-51463 was published Jul 22, 2025
The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for... High Unreviewed
CVE-2025-7645 was published Jul 22, 2025
The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before... High Unreviewed
CVE-2015-10136 was published Jul 19, 2025
The Simple Backup plugin for WordPress is vulnerable to Arbitrary File Download in versions up to... High Unreviewed
CVE-2015-10134 was published Jul 19, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database